chore: initial project scaffold with admin web, backend, desktop client, and deployment setup

Add monorepo structure for NexaVPN WireGuard control plane including:
- .gitignore for node_modules, build artifacts, and environment files
- README with project overview, monorepo layout, and quick start guide
- Admin web UI with React, Vite, TypeScript, and nginx reverse proxy
- API client with type definitions for users, devices, policies, gateways, and audit logs
- Admin pages for dashboard, users, devices, policies, g

deploy/docker-compose.yml

@@ -0,0 +1,72 @@
+services:
+  postgres:
+    image: postgres:17-alpine
+    environment:
+      POSTGRES_DB: ${POSTGRES_DB}
+      POSTGRES_USER: ${POSTGRES_USER}
+      POSTGRES_PASSWORD: ${POSTGRES_PASSWORD}
+    ports:
+      - "5432:5432"
+    volumes:
+      - postgres-data:/var/lib/postgresql/data
+      - ../backend/migrations/000001_init.sql:/docker-entrypoint-initdb.d/010_init.sql:ro
+      - ../backend/seed/001_seed.sql:/docker-entrypoint-initdb.d/020_seed.sql:ro
+    networks:
+      - control
+
+  backend:
+    build:
+      context: ../backend
+      dockerfile: Dockerfile
+    env_file:
+      - .env
+    depends_on:
+      - postgres
+    ports:
+      - "8080:8080"
+    networks:
+      - control
+      - gateway
+
+  admin-web:
+    build:
+      context: ../admin-web
+      dockerfile: Dockerfile
+    depends_on:
+      - backend
+    ports:
+      - "8081:80"
+    networks:
+      - control
+
+  reverse-proxy:
+    image: nginx:1.27-alpine
+    depends_on:
+      - backend
+      - admin-web
+    ports:
+      - "80:80"
+    volumes:
+      - ./nginx/reverse-proxy.conf:/etc/nginx/conf.d/default.conf:ro
+    networks:
+      - control
+
+  gateway:
+    image: alpine:3.21
+    command: ["sh", "/scripts/gateway-entrypoint.sh"]
+    cap_add:
+      - NET_ADMIN
+      - SYS_MODULE
+    volumes:
+      - ./scripts/gateway-entrypoint.sh:/scripts/gateway-entrypoint.sh:ro
+      - gateway-state:/var/lib/nexavpn
+    networks:
+      - gateway
+
+volumes:
+  postgres-data:
+  gateway-state:
+
+networks:
+  control:
+  gateway: